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Fig. 22A 



fingerprint { 

OS__ID = "Microsoft Windows 2000' 

# Sub-Module A 

i cmp__e cho_c o de = 0 
i cmp_e cho__ip_i d = ! 0 
icmp_echo_tos__bits = 0 
icmp_echo_df_bit = 1 
icmp_echo__reply_ttl = < 12 8 

# Sub-Module B 
icmp_timestamp_reply = y 
icmp_timestamp__reply_ttl = <12 8 
icmp_timestamp_reply_ip_id = ! 0 

# Sub-Module C 
icmp_addrmask_reply = n 
icmp_addrmask__reply__ttl = <128 • 
icmp_addrmask__ reply_ip_id = !0 

# Sub-Module .D 
icmp_inf o_reply = n 
icmp_inf o_reply_ttl = <128 
icmp_inf o_reply__ip_id = ! 0 
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P±g. 22A (Cont.) 



# Sub-Module E 

#IP_Header_of_the_UDP_Port_Unreachable_error_me 
ssage' 

icmp_unreach_echoed_dtsize = 8 
icmp_unreach_reply_ttl = <128 
icmp_unreach_precedence_bits = 0 
icmp_unreach_df__bit = 0 
icmp__unreach_ip_id = ! 0 

#Original_data_echoed_with_the_UDP_Port_Unreach 
able_error_message 

icmp_unreach_echoed_udp__cksum = OK 
icmp_unreach_echoed_ip_cksum = OK 
icmp_unreach_echoed_ip_id = OK 
icmp_unreach_echoed_total_len = OK 
icmp_unreach_echoed_3bit_f lags = OK 

# Sub-Module F [TCP SYN | ACK Module] 
#IP header of the TCP SYN | ACK 
tcp_syn_ack_tos = 0 
tcp_syn_ack_df = 1 
tcp_syn_ack_ip_id = !0 
tcp_syn_ackjttl = <128 

header 
17520 

= "MSS NOP WSCALE NOP 



#Inf ormation from the TCP 
tcp_jsyn_ack__ack = 1 
tcp_syn_ack__window__size = 
t cp_s y n_a c k_op t i o n s__o r de r 
NOP TIMESTAMP NOP NOP SACK" 
tcp_syn__ack_wscale = 0 
tcp_syn_ack_tsval = 0 
tcp_syn_ack tsecr = 0 
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Fig. 22B 

fingerprint { 

OS_ID = "Microsoft Windows 2003 Server " 

# Sub-Module A " 
icmp_echo_code = 0 
icmp_echo_ip_id = ! 0 
icmp_echo_tos_bits = 0 
icmp_echo_df_bit = 1 
icmp_echo_reply_jttl = < 128 

# Sub-Module B 
icmp_timestamp__reply = y 
icmp_timestamp_reply__ttl = <128 
icmp_timestamp_reply_ip_id = ! 0 

# Sub-Module C 
icmp_addrmask_reply = n 
icmp__addrmask_jreply_ttl = <128 
icmp_addrmask_reply_ip_id = 10 

# Sub-Module D 
icmp_inf o_reply = n 
icmp_inf o_reply_ttl = <128 
icirvp_inf o__reply_ip_id = ! 0 
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Fig. 22B (Cont. ) 

# Sub-Module E ' 
#IP_Header_of_the_UDP_Port_Unreachable_error_me 

ssage . 

icmp_unreach_echoed_dtsize = >64 

icmp_unreach_reply_ttl = <128^ 
icmp_unreach_precedence_bits - 0 

icmp_unreach_df_bit = 0 
icmp_unreach_ip_id = ! 0 

#Original_data_echoed_with_the_UDP_Port_Unreach 

able error_message 

l^cmp_unreach_echoed_udp_cksum - OK 

icmp_unreach_echoed_ip_cksum = OK 

icmp_unreach_echoed_ip_id = OK 

icmp_unreach_echoed_total_len = OK 

icmp_unreach_echoed_3bit_flags = OK 

# sub-Module F [TCP SYN | ACK Module] 
#IP header of the TCP SYN | ACK 
tcp_syn_ack_tos = 0 
tcp_syn_ack_df = 1 
tcp_syn_ack_ip_id = !0 
tcp_syn_ack_ttl = <128 

#Information from the TCP header 

tcp_syn_ack_ack =1 

too svn ack window size = 17520 

tcplsynlackloption^order = "MSS NOP WSCA1E NOP 

NOP TIMESTAMP NOP NOP SACK" 
tcp_syn_ack_wscale = 0 
tcp_syn_ack_tsval = 0 
tcp_syn_ack_tsecr = 0 

} 



